Privacy Policy

👋 Introduction

Thomtex School is a mobile shopping app where parents, teachers, and schools can browse and order school uniforms and accessories directly from us. The app also includes a parent/teacher discussion hub and a customer helpline. This policy explains what personal information we collect when you use our iOS app, how we use it, and your rights.

By using the app, you agree to this policy. Contact us with any concerns before using the app.

📋 Information We Collect

We collect only what is needed to provide the app, process eligible orders, and support customers:

• Account: Sign in with Apple account identifier, display name, email address, and profile photo URL when provided by Apple or your profile settings.
• Profile: Name, optional phone number, birthday, delivery address, occupation, and profile photo URL if available.
• School profile: School name, sport day, and number of students for verified teacher or school accounts.
• Account type: Role, pricing tier, and verified status, used to decide whether payment and school ordering are available.
• Order data: Items, sizes, quantities, order status, delivery address, contact phone number, and timestamps.
• Online payment: Payment reference, payment status, gateway transaction identifiers, and limited response details returned by our payment provider for order confirmation.
• Design artwork: Images you voluntarily attach to customized products. These images are stored with the relevant cart item and order.
• Hub content: Discussion comments and related activity you submit in the parent/teacher hub.
• Helpline content: Support messages you send to our team.
• Calendar notes: Private titles and notes you save for selected calendar dates. Public school events can be viewed without signing in.
• Handwriting practice: Ink strokes you draw in the ABC and number exercises are processed by Google ML Kit Digital Ink Recognition to check your writing. ML Kit may collect unlinked interaction, performance, diagnostic, device, and handwriting-input data for app functionality and analytics.
• Device token: Your APNs/FCM push notification token, used to send order, delivery, and account-related notifications.

We do not collect or store payment card details, GPS location, contacts, or biometric data. Online payment details are entered on the payment provider's secure page. The app only receives design images that you explicitly select using Apple's photo picker; it does not continuously access your photo library.

🔧 How We Use Your Information

• Create and authenticate your account using Sign in with Apple through Firebase Authentication
• Show the correct access and pricing for your account type
• Process, prepare, and deliver your orders
• Confirm online payment status returned by the payment provider and process successful orders
• Prepare customized products using artwork attached to the relevant order
• Send push notifications for order confirmations and delivery updates
• Display announcements, delivery notes, and business contact information
• Allow signed-in users to comment in the hub and contact the helpline
• Improve the app's performance and fix issues

🍎 App Store & Apple-Specific Practices

Thomtex School complies with Apple's App Store Review Guidelines. Our App Store Privacy Nutrition Label data types:

• Contact Info: Name, email address, optional phone number, and delivery address — used for account, order, and support functionality.
• User Content: Hub comments and helpline messages — used to provide discussion and support features.
• Photos: Design artwork that you choose to upload — used for order fulfilment.
• Purchases: Order history and order details — used to process and track purchases.
• Other Data: Private calendar notes and optional school profile details — used only for app functionality.
• Identifiers: Apple/Firebase account identifier and device push token — used for sign-in and notifications.
• Usage Data and Diagnostics: Unlinked product interaction, performance, and diagnostic data declared by Google ML Kit — used for handwriting-recognition functionality and analytics.

☁️ Data Storage — Firebase

Account, profile, order, design artwork, payment status, calendar note, hub, helpline, and notification data is stored on Google Firebase (Firestore, Firebase Storage, and Firebase Authentication). Firebase applies encryption at rest and TLS in transit.

Google's privacy terms: firebase.google.com/support/privacy.

🔗 Data Sharing

We do not sell your personal data. Your information is only shared with:

• Apple: Sign in with Apple and Apple Push Notification service.
• Google: Firebase infrastructure, database, storage, authentication, notification delivery, and ML Kit Digital Ink Recognition for handwriting exercises.
• eGHL / ADAPTIS payment gateway: To process online payments securely. Payment card or banking details are entered on the provider's payment page and are not stored in the Thomtex School app.
• Our staff: To process orders, prepare customized products, and provide customer support.
• Legal authorities: Only if required by applicable law or a valid legal process.

🔔 Push Notifications (APNs)

We use Apple Push Notification service and Firebase Cloud Messaging to send order confirmations, delivery alerts, and account-related updates to your iPhone or iPad. Your push token is stored securely in our database.

Manage notification permissions at any time under Settings → Notifications → Thomtex School. Revoking permission does not affect other app features.

👦 Children's Privacy

The app is intended for use by adults — parents, teachers, school administrators, and retail buyers. We do not market to or knowingly collect data from children under 13. If a parent or teacher orders on behalf of a student, only the adult account holder's information is collected.

✋ Your Rights

• Access or review the personal data we hold about you
• Request correction of inaccurate information
• Delete your account and associated app profile data inside the app
• Withdraw consent at any time
• Lodge a complaint with a relevant data protection authority

You can delete your account in the app from the Account page after signing in. You may also visit our Account Deletion page if you need additional help.

🔄 Policy Updates

We may update this policy periodically. The "Last updated" date will reflect any changes. Significant updates will be communicated via in-app notice. Continued use after changes constitutes acceptance.